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212 ESTABLISH NON-GLOBAL ZONE(S) 
HAVING UNIQUE IDENTIFIERS TO 
ISOLATE PROCESSES 
(FIG.3C) 



m RESPONSIVE TO A FIRST 
REQUEST, CREATE A 
COMMUNICATIONS OBJECT WITH A 
ZONE IDENTIFIER CORRESPONDING TO 

THE NON-GLOBAL ZONE 140 OF A 
PROCESS REQUESTING CREATION OF 

THE COMMUNICATION OBJECT 
(FIG. 3D) 



I 

21fi RESPONSIVE TO A SECOND 

REQUEST, INITIATING A 
COMMUNICATIONS USING THE 
COMMUNICATIONS OBJECT FOR A 
REQUESTING PROCESS DETERMINED 
TO BE ASSOCIATED WITH THE SAME 
NON-GLOBAL ZONE ASSOCIATED WITH 

THE COMMUNICATIONS OBJECT 
(FIG. 3E, 31) 
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Fig. 3 A 
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222 ESTABLISH NON-GLOBAL ZONE(S) 
TO ISOLATE PROCESSES, EACH 
NON-GLOBAL ZONE HAVING A FILE 
SYSTEM WITH LOCATIONS TO MANAGE 
COMMUNICATIONS OBJECTS 
(FIG. 3F) 



224 CREATE A COMMUNICATIONS 
OBJECT IN A FILE SYSTEM AT A FILE 
SYSTEM LOCATION CORRESPONDING 
TO A COMMUNICATIONS TRANSPORT 
MECHANISM 
(FIG. 3G) 



I 



m RESPONSIVE TO A REQUEST, 
INITIATING A COMMUNICATIONS USING 
THE COMMUNICATIONS OBJECT FOR A 
REQUESTING PROCESS DETERMINED 
TO BE ASSOCIATED WITH THE SAME 
NON-GLOBAL ZONE ASSOCIATED WITH 

THE COMMUNICATIONS OBJECT 
(FIG. 3H, FIG. 3Q 



I 
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Fig. 3B 
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222 CREATE NON-GLOBAL ZONE(S) 140 



m. ASSOCIATE A UNIQUE ZONE IDENTIFIER 
WITH EACH NON-GLOBAL ZONE 140 



I 



m CREATE A STRUCTURE 254 WITHIN THE 
KERNEL 150 FOR MANAGING INFORMATION 
ABOUT COMMUNICATIONS OBJECTS IN EACH 
NON-GLOBAL ZONE 140 



I 



FIG. 3A 
BLOCK 312 



Fig. 3C 




m RECEIVE REQUEST TO CREATE 
COMMUNICATIONS OBJECT 



m CREATE COMMUNICATIONS OBJECT 



I 



m STORE COMMUNICATIONS OBJECT IDENTIFIER AND 

ZONE IDENTIFIER OF REQUESTING PROCESS IN THE 
STRUCTURE 254 FOR MANAGING INFORMATION ABOUT 
COMMUNICATIONS OBJECTS IN THE NON-GLOBAL ZONE 

140 



I 



FIG. 3A 
BLOCK 314 



Fig. 3D 
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Ml RECEIVE A REQUEST FROM A PROCESS 174-1 TO 
INITIATE AN INTERPROCESS COMMUNICATION 



m DETERMINE BASED UPON A ZONE IDENTIFIER OF 
THE REQUESTING PROCESS 174-1, THE REQUEST, AND 

THE DATA STRUCTURE 254, WHETHER THE 
REQUESTING PROCESS 174-1 IS AUTHORIZED TO USE 
THE REQUESTED COMMUNICATIONS 




24& DENY THE REQUEST 
BECAUSE PROCESS 174-1IS NOT 
ASSOCIATED WITH NON-GLOBAL 
ZONE 140 



I 



252 PERMIT THE REQUEST FROM 
PROCESS 174-1 AND GRANT 
ACCESS TO OBJECT 244 OF 
NON-GLOBAL ZONE 140 



FIG. 3A 
BLOCK 316 




FIG. 3A 
BLOCK 316 



Fig. 3E 
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25£ ESTABLISH NON-GLOBAL ZONE(S) 140 

I ~ 
35Z MOUNT A FILE SYSTEM FOR EACH NON-GLOBAL ZONE 140 

TO THE FILE SYSTEM OF THE OPERATING SYSTEM 
ENVIRONMENT 100 

I Z 

m ESTABLISH FILE SYSTEM LOCATIONS IN THE FILE SYSTEM 
OF THE NON-GLOBAL ZONE 140 TO CREATE RENDEZVOUS 
POINTS FOR PROCESSES IN THE NON-GLOBAL ZONE 140 
SEEKING TO ESTABLISH INTE RPROCESS COMMUNICATIONS 



FIG.3B 
BLOCK 322 



Fig. 3F 




m ESTABLISH COMMUNICATIONS OBJECTS IN 
THE FILE SYSTEM LOCATIONS TO SERVE AS 
RENDEZVOUS POINTS 

▼ 

m ESTABLISH ACCESS PERMISSIONS FOR 
ACCESSING THE FILE SYSTEM LOCATIONS 

j 



FIG. 3B 
BLOCK 324 



Fig. 3G 
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m RECEIVE A REQUEST FROM A PROCESS 174-1 
TO INITIATE INTERPROCESS COMMUNICATIONS 
USING A COMMUNICATIONS OBJECT 244 




r 


27_4_ DETERMINE WHETHE 
AUTHORIZED TO ACCESS 
OBJE( 


ER THE PROCESS 174-1 IS 
5 THE COMMUNICATIONS 
:T244 




2Z& DENY THE REQUEST 
BECAUSE PROCESS 174-1 IS 
NOT ASSOCIATED WITH 
NON-GLOBAL ZONE 140 




m PERMIT THE REQUEST FROM 

PROCESS 174-1 TO ACCESS 
OBJECT 244 OF NON-GLOBAL ZONE 
140 



I 



m DENY THE REQUEST FROM 
PROCESS 174-1 TO ACCESS OBJECT 
244 BECAUSE THE PROCESS 174-1 IS 
NOT AUTHORIZED TO ACCESS THE 
OBJECT 244 



FIG. 3B 
BLOCK 326 




I 



Fig. 3H 



FIG.3B 
BLOCK 326 
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m RECEIVE A REQUEST FROM A PROCESS 174-1(A) 
ASSOCIATED WITH A NON-GLOBAL ZONE A 140(A) TO INITIATE 
INTERPROCESS COMMUNICATIONS WITH A PROCESS 174-1(B) 
ASSOCIATED WITH NON-GLOBAL ZONE B 140(B) 



I 



2M. DETERMINE BASED UPON A ZONE IDENTIFIER AND 
CREDENTIALS OF PROCESS 174-1(A) WHETHER THE 
REQUESTED COMMUNICATIONS WITH A PROCESS 174-1(B) 
OF THE NON-GLOBAL ZONE 140(B) IS AUTHORIZED 




YES 



222 DENY THE REQUEST 



I 



2M. PERMIT THE REQUEST AND 
ESTABLISH AN INTER-ZONE 
INTER-PROCESS COMMUNICATIONS 
PATH 



FIG. 3A BLOCK 
316 OR 
FIG. 3B 
BLOCK 326 




FIG. 3A BLOCK 
316 OR 
FIG. 3B 
BLOCK 326 



Fig. 31 
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